This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa
File:                     39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa (raw, json)
Hash identifier:          4wNm7SdKeRKEaBBBn2yhRi29IL7nM82igAE5n//XKpE=
Subject key identifier:   36:7B:7D:4D:CC:E0:69:65:91:F8:D3:0C:2B:20:FC:D6:2D:57:AE:59
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       03262B40E9E21AE5C5C25076121652F18956C584
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa
Signing time:             Thu 20 Nov 2025 14:28:44 +0000
ROA not before:           Thu 20 Nov 2025 14:23:44 +0000
ROA not after:            Thu 19 Nov 2026 14:28:44 +0000
asID:                     203636
IP address blocks:        95.169.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:26:2b:40:e9:e2:1a:e5:c5:c2:50:76:12:16:52:f1:89:56:c5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Nov 20 14:23:44 2025 GMT
            Not After : Nov 19 14:28:44 2026 GMT
        Subject: CN=367B7D4DCCE0696591F8D30C2B20FCD62D57AE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:7e:f7:64:72:a5:f9:08:98:2f:a8:9b:b2:
                    aa:86:1c:7e:e8:e8:4a:d3:25:7a:94:8c:82:8b:fb:
                    88:37:8a:34:52:72:40:42:2a:e2:03:f0:79:2f:60:
                    b4:a2:1f:d8:14:0d:03:23:94:23:2d:eb:16:b3:cc:
                    5b:d6:cf:b1:9f:2f:28:32:f1:0b:d0:0e:4b:2c:33:
                    11:3f:04:b7:9e:d0:a4:a2:e3:4f:64:44:69:a6:12:
                    e0:7b:ad:1b:70:4f:27:ab:ac:7c:fd:50:05:ce:03:
                    62:05:ff:de:9d:31:39:1c:08:a0:82:27:15:da:99:
                    57:b9:f0:b4:40:17:65:09:07:d1:10:6e:6a:36:27:
                    c8:85:80:02:d7:e1:fc:aa:92:d7:2d:e3:9c:8f:c0:
                    a3:af:11:15:44:24:86:a2:ce:54:25:58:2e:ed:4c:
                    41:62:45:c5:0f:2b:1f:45:75:ec:78:20:27:1d:23:
                    14:1c:64:54:ad:ae:b6:45:2c:68:f4:31:7c:73:e3:
                    67:63:af:ee:ba:4e:ad:cd:94:97:0d:9d:5d:b9:78:
                    96:af:c8:28:a9:e9:e4:15:5e:43:54:af:ee:9e:0b:
                    cc:b5:67:62:19:ad:e6:b2:f9:d9:cb:15:94:31:61:
                    b9:e6:8a:7c:86:b0:cd:6f:20:c4:ed:48:92:79:44:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7B:7D:4D:CC:E0:69:65:91:F8:D3:0C:2B:20:FC:D6:2D:57:AE:59
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:61:f6:92:c2:cf:d5:0a:5e:76:18:7e:e0:28:0d:67:b7:95:
         e8:a7:49:fc:8a:5e:ac:83:9f:de:6e:77:9d:ce:b8:06:60:a5:
         30:7e:02:c0:82:9d:5f:fe:fa:eb:03:fd:46:22:d2:e9:ba:41:
         df:e3:ab:43:2b:44:63:75:50:b6:e3:c3:84:86:60:fd:33:b5:
         a1:e9:81:f8:1f:14:39:a6:75:6a:67:46:f9:71:42:b8:d1:90:
         f0:75:02:6f:da:8f:ef:e3:09:60:10:4b:eb:b7:00:c7:08:27:
         c3:7d:a8:c1:1c:02:c6:21:19:bf:e2:53:51:c2:2e:fe:3c:d1:
         d8:da:c2:3d:cb:a2:3f:8c:09:c2:63:bb:17:66:fa:6c:3b:6a:
         ae:5f:37:ce:c1:2a:d0:6e:ed:4f:7f:2e:a0:23:63:3b:4b:de:
         c2:40:ff:9c:9e:00:ba:58:50:af:3c:37:df:1d:9e:92:e8:3a:
         22:1b:41:08:1f:d6:c9:53:ac:94:c9:33:bb:87:2f:42:30:2a:
         59:fa:92:8b:c5:c2:48:79:8d:8d:ff:30:5e:30:d1:c9:7f:7f:
         82:fc:9f:8f:de:ec:95:40:91:1d:f0:1b:81:53:82:3f:b6:00:
         04:18:bc:bb:18:c1:ef:58:56:41:80:7a:17:d3:04:d7:67:a6:
         4f:e9:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:18:32 2025 by rpki-client